A Tattered Cloak of Invisibility: Measuring Anonymity Loss in Railgun on Ethereum

• URL: http://arxiv.org/abs/2606.25926v1
• Date: Wed, 24 Jun 2026 15:03:56 GMT
• Title: A Tattered Cloak of Invisibility: Measuring Anonymity Loss in Railgun on Ethereum
• Abstract summary: We study behavioral leakage in Railgun on cryptocurrency mixers.<n>We consider five sources of leakage: characteristic timing patterns, address reuse, proximity in the transaction graph that preserve distinctive digit patterns across transaction values, and knapsack type matches in which groups of transaction amounts add up in revealing ways.
• Score: 3.47720456613335
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: From a user's perspective, perhaps the most significant difference between traditional banking services and widely used blockchain-based financial systems is that, in the latter, transactions and, either directly or indirectly, account balances and transaction histories are publicly observable. Therefore, a growing number of cryptographic solutions have been proposed to add a privacy layer to such systems. However, the privacy that users actually obtain does not depend solely on the security of the underlying cryptographic protocol: user behavior, transaction amount patterns, and timing decisions can substantially reduce anonymity. In this work, we study behavioral leakage in cryptocurrency mixers, focusing on Railgun on Ethereum. We aim to heuristically estimate the probability that a given deposit and withdrawal transaction belong to the same user. We consider five sources of leakage: characteristic timing patterns, address reuse, proximity in the transaction graph induced by prior public transactions, amount fingerprints that preserve distinctive digit patterns across transaction values, and knapsack type matches in which groups of transaction amounts add up in revealing ways. Our results show that even cryptographically strong privacy systems may suffer substantial anonymity loss due to user behavior and transaction patterns. Our five heuristics are able to uniquely link 17.65% of Railgun withdraw transactions to deposit transactions. We also applied a knapsack solver algorithm that was able to produce a 3.42 bit median anonymity loss for withdraw transactions. This work contributes to a better understanding of the practical privacy limits of mixers and anonymity pools, and points toward safer usage practices and design principles.

Related papers

• Blockchain Transaction Simulation Phishing [41.25322759036545]
  We present the first comprehensive study of transaction simulation phishing.<n>We detect over 4,000 phishing contracts deployed between August 2024 and June 2025.<n>Our analysis identifies more than 5,700 victims and approximately $3.48 million USD in losses, 91.5% of which occurred on clustering.
  arXiv  Detail & Related papers  (2026-07-30T18:09:56Z)
• Temporal Motif-aware Graph Test-time Adaptation for OOD Blockchain Anomaly Detection [55.18577006122169]
  We propose a novel framework termed textbfTEmporal textbfMotif-aware textbfGraph textbfTest-textbfTime textbfAdaptation (textbfTEMG-TTA)<n>First, we comprehensively capture the 3-node temporal motif distribution of each active address using an efficient computational mechanism.<n>Second, we design a simple yet effective test-time adaptation strategy to facilitate the sharing of common patterns between training and testing graphs.
  arXiv  Detail & Related papers  (2026-05-28T07:43:20Z)
• CONFETTY: A Tool for Enforcement and Data Confidentiality on Blockchain-Based Processes [39.8807633060402]
  This work presents the CONFETTY open-source web application, a platform for public-blockchain based process execution.<n>We use smart contracts to enact, enforce, and store public interactions.<n>We adopt attribute-based encryption techniques for fine-grained access to confidential information.
  arXiv  Detail & Related papers  (2026-03-14T11:27:21Z)
• Demystifying Private Transactions and Their Impact in PoW and PoS Ethereum [43.548299433042835]
  Private transactions, a specialized transaction type employed to evade public Peer-to-Peer (P2P) network broadcasting, remain largely unexplored.<n>We analyze large-scale datasets comprising 14,810,392 private transactions within a 15.5-month Proof-of-Work (PoW) dataset and 30,062,232 private transactions within a 15.5-month Proof-of-Stake (PoS) dataset.
  arXiv  Detail & Related papers  (2025-03-30T16:45:18Z)
• BlockScan: Detecting Anomalies in Blockchain Transactions [16.73896087813861]
  BlockScan is a customized Transformer for anomaly detection in blockchain transactions.<n>This work sets a new benchmark for applying Transformer-based approaches in blockchain data analysis.
  arXiv  Detail & Related papers  (2024-10-05T05:11:34Z)
• SeDe: Balancing Blockchain Privacy and Regulatory Compliance by Selective De-Anonymization [0.46040036610482665]
  We propose a framework that balances privacy-preserving features by establishing a regulatory and compliant framework called Selective De-Anonymization (SeDe)<n>Our technique achieves this without leaving de-anonymization decisions or control in the hands of a single entity but distributing it among multiple entities while holding them accountable for their respective actions.
  arXiv  Detail & Related papers  (2023-11-14T13:49:13Z)
• Pisces: Private and Compliable Cryptocurrency Exchange [7.907585289497186]
  We propose a cryptocurrency exchange that restores user anonymity for the first time. Since the platform knows highly sensitive user private information such as passport number, bank information etc, linking all (on-chain) transactions raises a serious privacy concern. We also ensure that the user cannot double spend, and the user has to properly report accumulated profit for tax purposes, even in the private setting.
  arXiv  Detail & Related papers  (2023-09-04T15:33:46Z)
• PTTS: Zero-Knowledge Proof-based Private Token Transfer System on Ethereum Blockchain and its Network Flow Based Balance Range Privacy Attack Analysis [0.0]
  We propose a Private Token Transfer System (PTTS) for the public blockchain. For the proposed framework, zero-knowledge based protocol has been designed using Zokrates and integrated into our private token smart contract. In the second part of the paper, we provide security and privacy analysis including the replay attack and the balance range privacy attack.
  arXiv  Detail & Related papers  (2023-08-29T09:13:31Z)
• Transaction Fraud Detection via an Adaptive Graph Neural Network [64.9428588496749]
  We propose an Adaptive Sampling and Aggregation-based Graph Neural Network (ASA-GNN) that learns discriminative representations to improve the performance of transaction fraud detection. A neighbor sampling strategy is performed to filter noisy nodes and supplement information for fraudulent nodes. Experiments on three real financial datasets demonstrate that the proposed method ASA-GNN outperforms state-of-the-art ones.
  arXiv  Detail & Related papers  (2023-07-11T07:48:39Z)
• Blockchain Large Language Models [65.7726590159576]
  This paper presents a dynamic, real-time approach to detecting anomalous blockchain transactions. The proposed tool, BlockGPT, generates tracing representations of blockchain activity and trains from scratch a large language model to act as a real-time Intrusion Detection System.
  arXiv  Detail & Related papers  (2023-04-25T11:56:18Z)
• Towards Measuring the Traceability of Cryptocurrencies [0.5371337604556311]
  We put forward a formal framework to measure the (un)traceability and anonymity of cryptocurrencies. Our work provides the first practical, efficient, and probabilistic measure to assess the traceability of cryptocurrencies. We implement and extensively evaluate our proposed traceability measure on several cryptocurrency transaction graphs.
  arXiv  Detail & Related papers  (2022-11-08T14:08:39Z)
• Blockchain is Watching You: Profiling and Deanonymizing Ethereum Users [0.0]
  We propose and implement user profiling techniques based on quasi-identifiers. We describe a malicious value-fingerprinting attack, a variant of the Danaan-gift attack, applicable for the confidential transaction overlays.
  arXiv  Detail & Related papers  (2020-05-28T14:33:32Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.